summaryrefslogtreecommitdiffstats
path: root/gfx/tests/crashtests/483120-1.xhtml
diff options
context:
space:
mode:
Diffstat (limited to 'gfx/tests/crashtests/483120-1.xhtml')
-rw-r--r--gfx/tests/crashtests/483120-1.xhtml23
1 files changed, 23 insertions, 0 deletions
diff --git a/gfx/tests/crashtests/483120-1.xhtml b/gfx/tests/crashtests/483120-1.xhtml
new file mode 100644
index 000000000..4a15e725b
--- /dev/null
+++ b/gfx/tests/crashtests/483120-1.xhtml
@@ -0,0 +1,23 @@
+<html xmlns="http://www.w3.org/1999/xhtml" style="font-family: monospace;">
+<head>
+
+<bindings xmlns="http://www.mozilla.org/xbl">
+ <binding id="w"><content><div xmlns="http://www.w3.org/1999/xhtml"><children xmlns="http://www.mozilla.org/xbl"/></div></content></binding>
+ <binding id="empty"><content/></binding>
+</bindings>
+
+<script type="text/javascript">
+
+function boom()
+{
+ document.createElementNS("http://www.w3.org/2000/svg", "rect");
+ document.getElementById("d").previousSibling.data += "C";
+ document.getElementById("d").style.MozBinding = "url('#empty')";
+}
+
+</script>
+
+</head>
+
+<body onload="boom();"><span>A&#x202E;<span style="-moz-binding: url('#w');"></span>B<span id="d" style="font-size: 80%; color: green;">D</span></span></body>
+</html>